Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86dd7d38-dfef-3a99-9e4e-6f5ce0c79114.roa
File:                     86dd7d38-dfef-3a99-9e4e-6f5ce0c79114.roa (raw, json)
Hash identifier:          a604nLmzEICI3hGynxfrMgDUZ3kU9P3TgKswbBY+oN8=
Subject key identifier:   8B:58:EC:00:18:93:47:00:63:EF:DE:3E:FC:26:42:2D:95:58:DA:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F0D6CF4DDFDEA4DD6C7CC9800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86dd7d38-dfef-3a99-9e4e-6f5ce0c79114.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31984
IP address blocks:        173.222.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f4:dd:fd:ea:4d:d6:c7:cc:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=237b3f58-67f6-4f7c-b9de-240be5e03128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:73:7a:09:22:ce:19:48:ac:a7:1d:08:1b:
                    f2:0c:f1:35:4c:59:ba:26:d1:62:75:60:f7:36:c0:
                    64:39:18:a7:eb:2c:07:cb:75:30:9e:50:ba:26:d4:
                    6f:82:cc:0f:ad:05:bb:66:b8:1f:2e:e4:4a:1c:16:
                    2c:c2:38:99:90:51:f7:98:a3:6d:6a:11:08:0a:2e:
                    84:83:2f:51:c5:3f:77:25:e5:b3:b9:04:6a:0d:46:
                    cc:7b:e6:9c:c2:b2:d1:ef:e0:f5:1d:3f:fd:72:9f:
                    67:1c:4e:26:1b:06:af:9d:09:1c:6b:7e:e8:22:c6:
                    e1:42:4b:b5:7c:54:a3:74:8d:3d:7c:72:81:db:40:
                    b5:53:68:af:89:9d:bd:37:ac:92:5b:75:04:19:a0:
                    de:1a:cd:9a:93:c4:99:6c:b4:a0:ad:19:2e:c0:7b:
                    79:b7:10:d9:6b:42:3a:82:26:9e:21:b6:a1:12:4a:
                    09:3d:e0:bb:d0:25:e6:3e:f9:c8:73:e4:4a:8e:80:
                    19:fd:bd:b9:f5:2d:2d:14:89:cb:60:23:f2:e6:d2:
                    73:61:85:09:8b:c8:a0:a0:84:4a:60:77:c6:bb:53:
                    35:89:85:fc:15:f9:15:c0:1e:c0:61:5c:22:54:a4:
                    25:d8:0b:b8:91:4b:60:d2:68:80:1d:66:d0:0f:bd:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:EC:00:18:93:47:00:63:EF:DE:3E:FC:26:42:2D:95:58:DA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86dd7d38-dfef-3a99-9e4e-6f5ce0c79114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3c:5a:b7:b0:bb:a2:77:f0:d3:c1:f6:8d:7b:b8:34:b2:bd:
         4d:93:1c:cb:f9:8f:3a:5a:18:9b:47:89:99:fb:1c:82:c3:17:
         b1:9b:7b:9a:67:45:5e:95:2d:43:09:cb:58:ac:d5:21:f3:a0:
         5a:b9:e6:7a:0c:e1:9f:0c:90:47:f0:2e:2c:b6:b5:0a:88:5c:
         41:c2:4c:06:75:1a:8e:c2:77:e0:64:b0:0b:0b:98:1b:d9:5f:
         e9:ba:81:30:0d:84:4c:a8:eb:42:7b:31:7d:d3:e4:f7:27:85:
         13:84:d5:3b:ce:7b:a7:1f:3e:e5:cd:25:f3:24:8c:e9:48:ed:
         7a:7a:1c:5c:32:05:c0:09:dc:84:cd:53:89:99:bc:cf:c9:4c:
         1f:a9:7e:82:d8:94:6b:e7:e1:4f:2e:61:06:a1:f8:8f:f9:45:
         cd:82:64:b7:73:00:2a:f9:be:01:f1:5a:03:94:65:06:c6:56:
         4d:90:83:db:cb:a8:6c:8c:12:95:f9:e7:dd:2b:2f:2b:c4:99:
         d1:cb:6f:ea:59:b5:7d:c4:1d:e6:db:8b:40:f6:ee:6a:20:29:
         ff:7e:43:29:46:3f:2f:4c:be:82:3a:62:af:f2:19:e9:83:d0:
         59:cb:e3:8a:58:ef:9a:fe:d7:d0:61:19:06:07:f7:27:37:7d:
         6f:1c:14:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPTd/epN1sfMmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MjM3YjNmNTgtNjdmNi00ZjdjLWI5ZGUtMjQwYmU1ZTAzMTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6RzegkizhlIrKcdCBvyDPE1TFm6JtFidWD3
NsBkORin6ywHy3UwnlC6JtRvgswPrQW7ZrgfLuRKHBYswjiZkFH3mKNtahEICi6E
gy9RxT93JeWzuQRqDUbMe+acwrLR7+D1HT/9cp9nHE4mGwavnQkca37oIsbhQku1
fFSjdI09fHKB20C1U2iviZ29N6ySW3UEGaDeGs2ak8SZbLSgrRkuwHt5txDZa0I6
giaeIbahEkoJPeC70CXmPvnIc+RKjoAZ/b259S0tFInLYCPy5tJzYYUJi8igoIRK
YHfGu1M1iYX8FfkVwB7AYVwiVKQl2Au4kUtg0miAHWbQD712sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItY7AAYk0cAY+/ePvwmQi2VWNoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZkZDdkMzgtZGZlZi0z
YTk5LTllNGUtNmY1Y2UwYzc5MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd4CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQ8Wrewu6J38NPB9o17uDSyvU2THMv5jzpaGJtHiZn7HILDF7Gbe5pn
RV6VLUMJy1is1SHzoFq55noM4Z8MkEfwLiy2tQqIXEHCTAZ1Go7Cd+BksAsLmBvZ
X+m6gTANhEyo60J7MX3T5PcnhROE1TvOe6cfPuXNJfMkjOlI7Xp6HFwyBcAJ3ITN
U4mZvM/JTB+pfoLYlGvn4U8uYQah+I/5Rc2CZLdzACr5vgHxWgOUZQbGVk2Qg9vL
qGyMEpX5590rLyvEmdHLb+pZtX3EHebbi0D27mogKf9+QylGPy9MvoI6Yq/yGemD
0FnL44pY75r+19BhGQYH9yc3fW8cFAQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:12:53 2026 by rpki-client